Hello, I managed to complete the challenge (question 3) with Burp Intruder but the answer was not the one I expected.
I could not verify the output with the script (both timing.py and timing.php) because it was not available for me, when I clicked it I was redirected to Hack the Box Enterprise dashboard. I’d love to get my hands on those scripts if anybody has it!